Testamur home Free store check

Privacy notice

Privacy

Last updated

Controller

Sieghart Michielsen, sole proprietorship, De Sevillastraat 84, 2100 Antwerpen, Belgium · KBO/BCE 1044.458.386 · hello@testamur.app

Visiting this website

  • No cookies, no advertising or tracking scripts, nothing stored in your browser.
  • Fonts are served from this website itself. Your browser does not contact Google or any other font service.
  • The web server needs your IP address to deliver the pages. It is used only for that and for protecting the forms against abuse, and it is not stored with your requests.

Visitor statistics

We count visits with cookie-free visitor statistics (GoatCounter), self-hosted on our server in Frankfurt, Germany. No cookies are set, no personal data is collected and IP addresses are not stored. Besides page views, we count a few anonymous events: a form was submitted, an email address was confirmed, the language was switched. Legal basis: our legitimate interest in knowing which pages are useful (GDPR Art. 6(1)(f)).

Campaign parameters

If you reach this website through a link with campaign parameters (utm_source, utm_medium, utm_campaign, utm_content, utm_term, utm_adgroup), the form sends these values with your request and we store them with it. Nothing is stored in your browser for this. Legal basis: our legitimate interest in knowing which campaigns bring requests (Art. 6(1)(f)).

Free store check

What we collect

  • Your email address and the store address.
  • That you requested the check, which also states that you own or manage the store: the identifier of the exact notice shown under the button, the time and a keyed hash of your IP address (we never store the IP address itself).
  • The main market, derived from the store address (for example .de → Germany).
  • Optional answers you give after the request: company size, Shopify plan, your role.
  • The language of the page you used, so that our emails reach you in that language.
  • The check result.

Purpose and legal basis

Running the check you request and emailing you its report: performing the service you asked for, GDPR Art. 6(1)(b). There is no confirmation step for the report itself: the check starts when you submit the form, and the report goes only to the address you entered. Every report email has a one-click link to delete the report and all your data, in case someone else entered your address. Protecting the form against abuse (rate limits, at most 3 checks per email address a day, a proof-of-work check that runs in your browser) and keeping a record of the request: our legitimate interest, Art. 6(1)(f). Your optional answers help us decide whom to follow up with first; there is no automated decision with legal effect.

How the check works

After you submit the form, a computer operated by us in Belgium loads public pages of the store (the home page and, where the store’s robots.txt allows, collection, product, blog and legal pages) with a pause between pages and checks them for accessibility barriers, usually within 5 to 15 minutes. It receives only the store address and your optional answers, never your email address. You can follow the check on a private status page; the report is emailed to you with a link to a private results page.

Optional: emails about Testamur itself

A separate, unticked box lets you ask for emails about Testamur itself (the app launch and the founding offer); you can also reserve the founding price on your results page. Both take effect only after you confirm with the button in the email we send you (double opt-in); without that confirmation we never send such emails. Legal basis: your consent, Art. 6(1)(a). Every email has a link to withdraw this consent in one click; your check and its result are not affected.

Optional: ad measurement with Google

This box is shown only when you arrive from a Google ad. If you tick it, we store the Google click ID (gclid) from the link and upload it to Google Ads in a weekly file as a “confirmed check” conversion, without your email address. The recipient is Google Ireland Limited, which uses it to measure our advertising. If you do not tick the box, the click ID is discarded. Legal basis: your consent, Art. 6(1)(a); you can withdraw it at any time with the link in our emails.

Waitlist (English page)

If you join the waitlist, we store your email address and optional answers to email you when Testamur opens on the Shopify App Store and when the statement template for your country is ready. Legal basis: your consent, Art. 6(1)(a), confirmed by double opt-in.

Processors

  • Website, statistics, lead database and the links in our emails: our server in Frankfurt, Germany, operated by DigitalOcean LLC under its data processing agreement.
  • Email delivery: Brevo (Sendinblue SAS, France), under its data processing agreement. Brevo’s service records whether our emails were delivered and opened and whether links were clicked; we use this only for delivery statistics.
  • The check runs on a computer operated by us in Belgium and never receives email addresses.

No data is sold or shared for advertising, except the Google click ID described above if you agree to it.

Retention

  • Waitlist: if you do not confirm within 48 hours, the link expires; unconfirmed details are deleted after 7 days. The link that confirms emails about Testamur works for 30 days.
  • Check results and the private results page: 90 days. The check record (store, date, barrier level): 12 months.
  • Confirmed contacts: until you unsubscribe, at most 24 months after our last contact.
  • Consent records: as long as the contact they belong to, and afterwards only as long as needed to prove the consent.
  • Every email has a link that unsubscribes you and deletes your data in one click.

Your rights

You have the right of access, rectification, erasure, restriction, data portability and objection (GDPR Art. 15–21), and you can withdraw any consent at any time without affecting earlier processing (Art. 7(3)). Send requests to hello@testamur.app. You can also complain to a supervisory authority; ours is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données), www.dataprotectionauthority.be.

The Shopify app

The app scans the public pages of a store and stores the results for that store. It does not need access to customer or order data. It gets its own privacy notice with the Shopify App Store listing.